ScanMalware.com

Security Scan Report: www.dea.gov

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/df3e0b9c-710e-4030-9a65-3b70234525e5Domain and IP registration (RDAP)/api/v1/rdap/df3e0b9c-710e-4030-9a65-3b70234525e5Certificate Transparency/api/v1/ct/dea.govHow often this domain was scanned/api/v1/domain/stats/dea.govScan history for this domain/api/v1/domain/history/dea.gov?limit=15
This website contacted 195 IPs in 5 countries across 50 domains to perform 176 HTTP transactions. The main domain is dea.gov and was registered 25 years ago.

Submitted URL: https://www.dea.gov/what-we-do/law-enforcement/epic

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

The site is a legitimate DEA government page with no security concerns.

Safety Factors (3)
Established government domain
HTTPS encryption
Public warning about known scams (demonstrates legitimate security awareness)
Domain age information unavailable

Details

Page Title

El Paso Intelligence Center (EPIC)

Scan Type

public

Domain Name Analysis

The domain name 'www.dea.gov' uses the United States government-restricted top-level domain (.gov) with subdomain 'www'. The second-level label 'dea' is 3 characters long split between two vowels and one consonant. Segmentation suggests two words: de, a. Average segment length settles at 1.5 characters. 'de' most strongly signals Spanish. You may catch it in Hungarian and Romanian as well. Overall, 'www.dea.gov' reads as Spanish.

Screenshot

Security scan screenshot of https://www.dea.gov/what-we-do/law-enforcement/epic

Page Load Overview

6.03s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8,184 chars
Detector Agreement:75%

Website Classification

Primary Category

other62% confidence
Type: spa
Method: ml+structural

All Detected Categories

other
62%
malicious
54%
government
48%
suspicious phishing
25%

Detected Features

Search
OG: page

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
176216.239.32.36United States
AS15169GOOGLE
7723.212.215.22Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
9216.58.212.136United States
AS15169GOOGLE
5142.250.74.195United States
AS15169GOOGLE
557.144.244.1Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
4104.17.24.14United States
AS13335CLOUDFLARENET
3193.0.160.130United States
AS54312ROCKETFUEL
3146.75.120.84Frankfurt am Main, Hesse, Germany
AS54113FASTLY
33.64.191.58Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
3104.75.88.209Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
176195--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E9C3649258E13537C553A3F2A2AC133CE9F68403E1298C55F0ECA28A5FD1F955FA352E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZRTX2qGyL+5egZIy3wob+7RgkKRHL1C9CPWr8vDhLbdDVLFlV:ZR45R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:129827:FFVASKwIXqFVcohgMoaAEQ0Ey6kWEw1TGgacChQrCgMEAD+IGYoolgNCAFQJIgHQEEAHhgkAACuukLIIELzii4QQwUQAASEa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffc7000001ffff
Perceptual Hash:be7394077c213dc1
Difference Hash:844d1f1c6a6fff22
Wavelet Hash:06ffc7000001ffff
Color Hash:#d2bf2d

Other Hashes

Crop Resistant:844d1f1c6a6fff22,a280a232529280a2,41b68c9c8cc33139,4c1f1d0a726b67ff,0f00684664443434

Scan History

Scan history not available

Unable to load historical scan data